$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: 6mGeXm9/o+LeX+9pxo2nCe7pxtbSiu4bO8+P708Dyo4= Subject key identifier: 52:BA:B7:EA:4F:21:F2:A9:F5:BB:EA:B1:4C:E3:F1:DE:CD:5C:A3:29 Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 03A0 Signing time: Sun 19 May 2024 02:35:31 +0000 Manifest this update: Sun 19 May 2024 02:35:31 +0000 Manifest next update: Sun 26 May 2024 02:35:31 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: 55li5eNy1CglzpXE+VLZDhmFZgap5IIMkHac9Tr4WNE=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: /dWcySCBSA40/p7ZEddMfO9MmkVM6uS6LcL9k3LtIJk=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: /afmQB3zM94nTq3/2oDWU9CHh0hD2dVbGgL+IHZt9os=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: cJIwz/JsTDgsL3u8mdpUstTIr2TVgKDrX6Ae6kVf0Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: May 19 02:35:31 2024 GMT Not After : May 26 02:35:31 2024 GMT Subject: CN=66496573-b66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:0a:b4:c5:c2:61:5d:16:2e:f6:e5:c3:df: 5b:e8:78:0c:15:5e:15:54:07:6e:1b:81:02:92:30: b0:ff:4d:36:e9:2e:0f:2c:4b:62:96:ce:6b:67:ac: 29:39:77:cd:5a:9b:87:d5:1b:00:6e:a5:5d:27:30: 9c:f2:bd:e5:db:38:32:76:0b:e2:bd:d3:25:8b:dc: 7f:2d:e7:c5:06:52:4b:3a:15:0e:70:c3:41:5c:7d: 8c:21:d1:82:3c:55:60:1f:82:84:82:b7:78:97:0b: 0f:bf:cb:22:90:53:ce:13:0c:6e:28:ba:9f:98:a2: e3:21:56:ab:05:9f:8e:6b:93:54:e7:13:1b:67:fd: ab:5d:07:42:f7:1e:09:18:71:03:e4:d4:d1:8b:63: a5:d8:e1:ca:f1:fd:ca:2d:9a:96:9f:63:e9:85:63: 82:63:a6:61:39:a0:5b:22:5d:84:ca:be:a2:bb:49: 9c:e0:e4:26:40:33:f5:07:e3:ec:dc:b2:9c:a8:c7: 95:de:b1:59:79:4c:be:f4:77:46:76:ea:3a:b6:4e: fa:68:cb:4e:21:40:cf:7e:ad:1c:3f:9c:57:23:41: 49:dd:21:67:fc:3e:d8:bb:18:d5:5c:d5:74:ca:3c: 67:00:fe:68:ae:a7:46:ea:99:68:fe:72:aa:74:4f: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BA:B7:EA:4F:21:F2:A9:F5:BB:EA:B1:4C:E3:F1:DE:CD:5C:A3:29 X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:43:86:72:eb:ff:d1:c3:95:99:f1:df:7f:d8:6c:64:2e:66: 9f:c4:45:e1:34:f3:18:50:2d:1f:13:ab:71:e7:3f:da:44:49: 67:11:46:1c:9b:25:e3:e6:d6:45:41:9d:43:60:cb:d8:94:93: 71:f7:bb:cd:48:93:c8:8a:2b:e9:dc:ac:53:c6:59:31:e8:31: 1d:3d:d1:5c:29:04:f3:f3:d1:20:b8:be:54:c1:63:15:57:0e: e3:89:35:2c:41:9a:9c:91:23:15:40:13:14:27:d0:e7:cb:e5: 7e:9a:2c:2d:d7:bf:c5:1c:bc:81:c5:40:10:8e:41:e8:43:cc: 9b:c2:28:5a:44:c6:92:08:7e:9c:7c:e4:37:fe:98:b9:b3:1b: 6e:1e:f7:27:1b:31:57:5f:68:39:31:fe:12:5b:09:40:c6:9f: 2f:1f:65:52:b4:9f:e8:e8:6b:dd:70:5b:ad:ec:b4:70:79:14: 89:c5:48:bc:99:5a:d3:3d:00:d0:51:3b:b3:8f:3f:02:ab:ba: a8:a5:1f:17:92:62:e0:10:59:c5:96:de:be:c9:ea:c9:3f:b1: 6e:14:fe:eb:01:cf:67:8c:78:c1:bc:24:e0:bb:2b:3c:46:48: d2:a9:b5:e7:41:6e:2e:16:88:c0:3b:aa:4d:f9:af:45:93:63: a1:a7:46:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjQwNTE5MDIzNTMxWhcNMjQwNTI2MDIzNTMxWjAYMRYwFAYD VQQDEw02NjQ5NjU3My1iNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MkKtMXCYV0WLvblw99b6HgMFV4VVAduG4ECkjCw/0026S4PLEtils5rZ6wp OXfNWpuH1RsAbqVdJzCc8r3l2zgydgvivdMli9x/LefFBlJLOhUOcMNBXH2MIdGC PFVgH4KEgrd4lwsPv8sikFPOEwxuKLqfmKLjIVarBZ+Oa5NU5xMbZ/2rXQdC9x4J GHED5NTRi2Ol2OHK8f3KLZqWn2PphWOCY6ZhOaBbIl2Eyr6iu0mc4OQmQDP1B+Ps 3LKcqMeV3rFZeUy+9HdGduo6tk76aMtOIUDPfq0cP5xXI0FJ3SFn/D7YuxjVXNV0 yjxnAP5orqdG6plo/nKqdE8SUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK6t+pP IfKp9bvqsUzj8d7NXKMpMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUQ4Zy6//Rw5WZ8d9/2GxkLmafxEXhNPMYUC0fE6tx5z/aRElnEUYc myXj5tZFQZ1DYMvYlJNx97vNSJPIiivp3KxTxlkx6DEdPdFcKQTz89EguL5UwWMV Vw7jiTUsQZqckSMVQBMUJ9Dny+V+miwt17/FHLyBxUAQjkHoQ8ybwihaRMaSCH6c fOQ3/pi5sxtuHvcnGzFXX2g5Mf4SWwlAxp8vH2VStJ/o6GvdcFut7LRweRSJxUi8 mVrTPQDQUTuzjz8Cq7qopR8XkmLgEFnFlt6+yerJP7FuFP7rAc9njHjBvCTguys8 RkjSqbXnQW4uFojAO6pN+a9Fk2Ohp0b8 -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org